Javascript Menu by Deluxe-Menu.com
PC Security Software Reviews and Side-by-Side Comparisons of Anti-Spyware, Anti-Spam, Firewall, and Registry Optimizer Products top_pick.gif
spyware frustrationsAdware and Spyware could be harming your computer

Flooder.ake

 Email this article  Printer-friendly version

Flooder.Ake is a brand new threat that began to appear on people's computers on December 6th, 2006.

The symptoms of infection are an alert window which pops up reading "threat found, trojan horse, heal now". Clicking this popup quarantines a system file, which then restarts the computer and pops up the alert again. The computer is then stuck in an infinite loop. There are several solutions which have been reported to work (see below).

This problem only seems to be impacting users of the antivirus program, AVG. Initial indications are that this not a true virus, but rather a bug in AVG that results in damage to system critical files.

If you are experiencing problems associated with flooder.ake, please post any pertinent information below. If you have a screenshot that we may share with our readers, please post a URL where we may find it. Thank you!

Urgent Note: Yesterday, AdwareReport broke the flooder.ake issue and has provided this page to help people affected by this issue. Google and Yahoo have so far yet to index the page, so all of our traffic has been coming from PPC ads that we've placed for this keyword. Unfortunately, the amount of traffic we're now getting has led to a very expensive (4 digit) advertising bill.

If you find this page useful, you can help us continue to research and publicize solutions for emergency computer problems by:

1. Purchasing security software products via the links on our review pages.
2. Visiting advertisers who advertise on this and other pages on our site.
3. Sending a small donation via PayPal (please send to rich@adgooroo.com).
4. Linking to us from your website.

Thank you for your kind comments and for allowing us to be of service to you!

Solutions for fixing Flooder.ake

Solution #1:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. Uninstall AVG through the control panel "Add or Remove Programs" applet.

3. Reboot.

Solution #2:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. In the Windows Safe mode, navigate to following folder:

C:\WINDOWS\system32\drivers\

3. Rename rename the following files to avoid furhter deleting of "winlogon.exe".

AVGCLEAN.SYS -> AVGCLEAN.SY_
AVGRSXP.SYS -> AVGRSXP.SY_

4. Launch Registry Editor (regedit.exe) and remove the "__delete" value in the right pane from this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgClean

5. Restart the computer back to Windows normal mode

6. Update your AVG program to latest virus base version. Launch AVG or open AVG Control Center and press F9 key to update your AVG.

7. Then rename the SYS files back to their original names

AVGCLEAN.SY_ -> AVGCLEAN.SYS
AVGRSXP.SY_ -> AVGRSXP.SYS

8. Restart your computer for to get AVG Resident shield loaded again

Solution #3:

If either of the above solutions do not work, you will have to reinstall your Windows operating system.

Email to a friend
Email this entry to:


Your email address:


Last Updated on December 6, 2006 3:27 PM

Comments (83)

We've experienced this problem on our computer. The description above is very accurate.

When my husband clicked on the pop up window to heal the virus, he did not want to restart our computer. The restart window kept popping up until he restarted. Once you click on the heal popup window, you're ensnared in the loop.

Are we sure the only way to fix this is reinstall windows?? Why does AVG not know about this issue yet - I have one that is doing this same thing and I can't get it back either, but reinstalling at this juncture is not an option. Amazing this is the only post I've been able to find on this so far. I will be back the second I find out more.

great. i just got this laptop and avg was preinstalled on it. im sooo annoyed. re installing is not an option as i dont have it being a second hand comp. lets see what avg has to say??

i was able to get back into windows by uninstalling AVG through safe mode. So it doesn't look like a total format is necessary. Still going to have to make sure there aren't remnants though.

Yep,
my dad's PC got it today. Had to do a clean install. Sucks!!How come AVG didn't heal it?

back again. avg site wasnt much help. told me what i had to do in regisrty editor (in safe mode)but the value i had to delete wasnt there bla bla bla. so i just uninstalled avg and my sytem restarts now. seems to be the go. just glad i have another computer otherwise i wouldnt be here and i would be xnmhjd and not know what the hell was going on. not going to reinstall that garbage.

heres what avg says to do
easier to just uninstall the thing in safe mode


Unfortunately, this issue is caused by the false detection on particular version of "winlogon.exe" file. The false detection has been immediately fixed, however several users may have updated their AVG to this virus update containing this false definition. In order to solve this unpleasant issue, please proceed as follows:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. In the Windows Safe mode, navigate to following folder:

C:\WINDOWS\system32\drivers\

3. Rename rename the following files to avoid furhter deleting of "winlogon.exe".

AVGCLEAN.SYS -> AVGCLEAN.SY_
AVGRSXP.SYS -> AVGRSXP.SY_

4. Launch Registry Editor (regedit.exe) and remove the "__delete" value in the right pane from this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgClean

5. Restart the computer back to Windows normal mode

6. Update your AVG program to latest virus base version. Launch AVG or open AVG Control Center and press F9 key to update your AVG.

7. Then rename the SYS files back to their original names

AVGCLEAN.SY_ -> AVGCLEAN.SYS
AVGRSXP.SY_ -> AVGRSXP.SYS

8. Restart your computer for to get AVG Resident shield loaded again

The problem should be solved now.

Please note that this issue may happen on a very old Windows XP systems without any Service Packs. This issue doesn't appear on Windows XP Service Pack 1 or Service Pack 2. Therefore we strongly recommend to update your Windows XP to Service Pack 2, not only to get your computer secure. Visit [www.windowsupdate.com] to get the latest critical security patches for your operating system.

It hit my computer about 5PM CST. I was downloading mail at the time I got the first warning. All the other is the same as others have posted.

I started in Safe mode, ran AVG scan found:
Trojan Horse Flooder.AKE WinLogon.EXE

I'm going to try and uninstall AVG.

It happened to me too. I can't even get it into safemode. Very frustrating.

yes i restored the original virus file from the vault as i read it locks away a system file so was worried that if i removed avg it would be lost and still had the problem, but i removed avg in safe mode and got back in my pc after clicking the heal tab and being in the loop so all is not lost!!!

It hit our accounting computer just before noon, I had to do an install/repair of XP Home to get things running again. We were down for just over 6 hours. The above description is very accurate.

It hasn't bothered my two computers at home, they are both XP Pro SP-2.

Yes I had the same problem with my Mums pc to day.

I did A Lookup in google groups For "Flooder AKE" And found the following at http://groups.google.co.uk/group/24hoursupport.helpdesk/browse_thread/thread/5e4ca512ba50cddf/08d6ead479bd2013?lnk=st&q=Flooder+AKE&rnum=2&hl=en#08d6ead479bd2013

Where somebody explain the solution was to boot into safe mode and uninstall avg.

After uninstalling avg the pc successfully booted in to Windows.

I immediately download Sp1 and reinstall a new version of avg.

It appears that is virus occurs on pc without sp1 installed.

We also removed AVG while in safemode. We couldn't find the values mentioned in the solution either.

Thanks to everyone who posted. Your input helped a lot.

Me Again! I got into SafeMode someone told me that it was F7 thats why I could not get in. In safe mode I uninstalled avg and rebooted and all seems fine now.

Unistalling AVG in safe mode seems to have worked for me as well. I would like some confirmation that there arent any lasting effects as I'm ure others would as well...

What do you do if the pc QUIT going into safe mode before we found the fix listed here. We just fixed one PC but another will not boot with any option (safe mode or otherwise).

It also worked for me. I now have SP-1 installed and AVG 7.5... all looks well!
Thanks adwarereport for this site and the folks that posted.

I've tried to start in safe mode, but it keeps rebooting there too... what do i do? Help, please!

The uninstall while in Safe Mode method worked for me as I did not have either driver file AVGCLEAN or AVGRSXP. Thanks for providing this information! I Googled the virus filename and yours was the only site that was in fact relevant!

AVG auto-updates every morning when I turn on the PC. So this morning at 8AM EST, I got the "heal" pop up window and restarted. After looping a few times, I went to my other computer (also running AVG), and did a Google search for "trojan horse Flooder.AKE" and nothing came up. Checked on Grisoft's site (maker of AVG), and nothing. Posted a trouble ticket with AVG. Waited an hour and didn't hear anything from AVG (other than the auto-reply email confirming my email "was received by AVG Tech support" blah blah blah. BTW, it's over 12 hours later, and I still haven't received an email reply from AVG.

Anyway, by noon (this page wasn't up yet), I tried restoring to a previous date via Safe Mode, but that didn't help. Didn't know what else to do other than to try and repair Windows using the install CD. Well, that didn't work either, and worse, I wasn't able to get back into Safe mode after that. So I swapped out the hard drive with an old 8 GIG Maxtor (so I don't lose my data), and I'm installing Windows on the new drive. Once it's installed, then I'll connect the old drive and copy all my data to an external drive.

What a big pain! AVG has lost my business. I only have 5 computers, so I'm sure they won't care, but I thought they were the "good" guys compared to Norton and Mcafee.

are you starting in safe mode with networking because that is what i started in and it worked

The description is very accurate. I have 2 op sys in one PC. Was able to but on 2nd op sys. Found some info on the net. Re-booted in safe mode, uninstalled AVG and rebooted in norm mode. Thank Jehova it worked. Now I'm looking for some some anti-virus software. In my search I found this website:

[URL DELETED]

looks very suspicious to me. Could it be the cyber attacks of you know who?

Editor's Note: Check out our new anti-virus reviews. You can find them on the left-hand navbar.

Thanks to everyone. This is the only placce I could find a fix. Uninstalling AVG did it for me. Simple. Thanks to everyone.

G!

Uh, people, just so that you know, what you can do, is:

1- Go into safe mode, by restarting the computer while it's loading

2- In safe mode, have AVG scan for viruses, and have it remove and heal the Trojan Horse Flooder.AKE.

DO NOT LET THE COMPUTER RESTART

3- Instead, just go to the control panel, and uninstall AVG.

4- Reset the computer manually.

5- BOOM! Problem solved.

What a pain and waste of time! Fortunately all you have to do is uninstall AVG and your computer should star, like mine and others have.

To Thomas,

I find it amusing that you blame AVG, but not the creator of the virus.

Yup, I had a bunch of computers come into my store today, all with exactly the same "virus" (Flooder.AKE) and all with AVG Antivirus.

I couldn't get into Windows with any of them.... not in Safe mode, Debugging mode, VGA mode... nothing. Every system kept on rebooting so uninstalling AVG was not an option unfortunately. Turns out I had to reinstall on every single machine using a secondary hard drive.

And worst of all? Not one peep on Grisoft's site. For shame!


I guess the lesson here is keep your pc updated.

SP1 ??

uh SP 2 came out over a year ago. Do you also only change your oil when your car wont start ?

A car manufacture doesnt give FREE maintanence t you but MS does give free updates, I cannot forgive anyone who doesnot appply updates.

Then again I charge $200 a pop to fix a pc for people who are in this loop.

take care

The Tech God
Sitting on a beach sipping Margaritta's

Many thanks guys for providing a fix so quickly!

I could not find AVGGLEAN.SYS on my system, or the corresponding registry entry, however following the remainder of the instructions seems to have fixed the problem.

Should I really buy AVG software when the trial version expires?

Thanks again Alan K.

I feel that the solution provided above is inadequate for XP Pro, since the files and paths described appear to be only for XP Home edition.

What worked for me is the following:

1. Log into Windows Safe Mode by continually pressing F8 during start up. When the screen prompts, choose Safe Mode.

2. Uninstall AVG Free and restart the PC normally.

3. Download the latest version of AVG Free v7.5... and install it. Get all the file definition updates and do a scan.

Problem solved.

RE: Posting by Tony regarding SP1 or SP2 and flooder.ake. I have SP2 installed from disc from MS, auto update is on, and have this problem with flooder.ake Will reboot and start and safe mode and fix it. Wanted to make sure readers weren't feeling secure just because they have SP's.

Dave

It shows up on an XP box here - and the box is running SP2, fully patched.
At least that's the only box I have to worry about - the rest of my network runs Linux...

Contrary to a couple of comments above, this does happen, or at least has happened to at least one person, to people with SP1 and SP2 installed, along with all XP Pro security updates. It happened with the AVG Free 7.5 run this morning.

Kudos to this site, though. Did a google on "Flooder.ake", and found this site and this info on Flooder.ake. The comments have told me what I need to do.

When my AVG scan ran it automatically quarantined the winlogon file with no dialog, but the file was in one of the $NTUNINSTALL directories and did no harm. Perhaps if it had been the current version in the Windows directory, the dialog concerning reboot would have occurred. I think that what one poster said that it only affects Systems that may not have been kept up to date is probably true, although I feel this does not absolve AVG in any way for their culpability.

A big thank you to AdwareReport for being on top of the issue!!! KUDOS!!

At first I couldn't get this procedure to work, then decided to uninstall AVG and reinstall. But AVG UNinstall tells me that I am trying to INSTALL on a workstation and my license is for a different installation.
Went back to the above instructions and another restart and it worked.

When my AVG ran this morning a virius warning appeared but fortunately no pop up to heal. When I clicked on the info it said the trojan was embedded and could not be fixed.
I also could not find the speciifed files so just deleted AVG in safe mode then re installed.
thanks for all the help

Just an update. Used the fix recommended above - Save mode, rename the two files, regedit and delete the delete entry, reboot, go to AVG update [and there were two waiting, even though I had updated yesterday - my sequence does the daily scan, then updates, that's why this s[tuff] didn't show up yesterday], go back and rename the two files back, then reboot again.

Worked like a charm, although the AVGRSXP.SYS -> AVGRSXP.SY_ was actually AVG7RSXP.SYS -> AVG7RSXP.SY_ on my installation.

Also, while I had been checking this out - AVG was running that daily scan at the time, I got that alert message early on in what is a half-hour scan - AVG finished its scan and apparently automagically put the winlogin.exe file in the virus vault. So I also had to go into the virus vault and restore the file to its original location.

Don't know why others had trouble with it. System is a P4, 1.7, 768MB, Win XP Pro/SP1/SP2, AVG Free 7.5.

Did a full system scan immediately, and the problem is gone.

One of my home comps has been affected. I cannot uninstall AVG in safe mode..it gives 5 errors and refuses to uninstall. I did not have the files listed (AVGCLEAN.SYS and AVGRSXP.SYS)...

I tried uninstalling through avg and through add remove programs and I get a failure...it states that these files... avg7rsxp.sys, avg7core.sys, avg7rsw.sys, avgtdi.sys and avgupsvc.exe...cannot be started in safe mode...1084

I will try other things...perhaps I'll have to manually remove everything and remove all registry entries...I'm getting very annoyed.

After reading the comments, and being hesitant about putting the pc in safe mode (I'm not too computer literate)Couldn't I just delete those files that are in the vault?

Update...I placed the entire AVG folder and all the drivers that were in system32/drivers into folders named "hold"....then I went through the registry and manually removed everything related to avg...

I rebooted, and the system seems to be fine.

Now to go do an online scan...just to double check.

I have xp with service pack 2...so this is not just happening on out of date boxes.

I would like to know if this really is a false positive on AVG's part, or if it is indeed a Trojan designed purposely to exploit a weakness in AVG. (like something a competitor might have released) Does anyone know for sure what triggered the instances? Was it an avg update, or perhaps something else?

Do we know FOR SURE that this is not a real Trojan? It would suck if we just placed it back into our systems.

RE: Flooder.ake and service packs. I have SP 2 on my computer with auto updates on. Yesterday and today, AVG ran automatically and detected Flooder.ake. Both times AVG ran, it detected Flooder. Both times it deleted the Trojan Horse. This morning, I sent a note to this forum saying the SP2 version of XP was affected. However, all I had to to was reboot, reran AVG and there was no detection of Flooder.ake.

Did not go have to go into Safe Mode and do all the work to get rid of it. Will watch for it but all seems to be okay with just a simple reboot.

Dave

My wife's laptop got hit by this. Our problem is different than others I see here. After she clicked the detection, her computer will not reboot. It gets a fatal system error and shuts down. I did reboot in safe mode and ran AVG scan, which detected 2 instances of flooder.ake. I intitiated the "healing" process but on restart, got the fatal error again. I noted in the scan that there were "reading errors" for "Partition Table (MBR)" and for "Boot Sector of Disk". Anyway, just a report on our different circumstances. Will try the fixes above when I get home from work.

Ok, here is what is happening with me. I downloaded the update and deleted the file on my computer at work. It went into the loop and I had to reformat. No big deal it is done and over with. This morning my boss got the same thing. She let me know she had a "virus". Sadly it was to late for us to stop the deletion as she has it set to auto delete. We did some searching and found all this. She has not rebooted her system as we know it will get stuck in the loop. The winlogon.exe file has already been removed from her PC, what can we do to fix the problem? Would a repair from the XP disk work? What can we do to get that .exe file back on her PC.

Thanks!

AVG daily scan of my computer came up with the big red VIRUS ALERT this morning... flooder.ake.... then at the end of the scan stated that it had fixed the two infected winlogon.exe files. Whether that actually happened or it was a false detection, I do not know. The best part, though, is that nothing further happened - no need to reboot, reinstall, etc, so perhaps AVG has fixed things today.

We got this trojan yesterday. I started up my computer in safe mode....it took a few minutes for XP to load up and get through the login process (very slow). After that, I released the winlogon.exe file from the virus quarantine in AVG. I then uninstalled AVG in safe mode before rebooting. I am scanning now to see if I still have the trojan with another piece of virus software...but at least I was able to logon!

XP Home SP2 flooder.ake came up this am, went to google, found this site read comments and fixes, went to virus vault, restored winlogin files, updated AVG software, ran scan again, restarted computer, no problem, fix must have just come out in AVG priority update. First trouble with AVG, I'll keep using it. Thanks for your site, wonder why Google is not showing it in my searches now, one hour ago it came up? Thanks again

A few people have stated that they simply uninstalled AVG in safemode, and restarted their computer to fix the problem. Is that sufficient, or is it necessary to make the changes in the registry? I'm not computer savvy, and would prefer not to mess with anything in there just in case I make a mistake? Also, has anyone noticed that your system restore no longer works since this AVG problem ocurred? Thanks

Has Grisoft indeed updated a fix to this as suggested above by Lyndal Slaughter?

I have not rebooted my machine. I rarely do.

There is NO mention of this on their site that I could easily find.

Ok, I have read a little bit of the stuff people have been posting and I have a small question. We go to restore the logon.exe file from AVG and when we click save it says that the file already exist? Should we overwrite, or since it already exist are we ok and need not worry about the loop?

The reason i can't even start from the safe mode anymore is because when I did, I went straight to AVG and got ridof all the viruses... then ran the scan... only that time it found 2 of the flooder.AKE ... only at that time I didn't realize that it was because of AVG... I had'nt found this site... I'm not even sure it was up yet. so I restarted my computer again like it told me to and nowI can't even start it in safe mode.

Thank you so much guys. I thought my computer was properly dead and gone (second hand, so no windows disc).

I can't afford any contributions, but I will plug you guys whereever i go!

Screw AVG, and long live these dudes!

it happeden to me as well at about 5 p.m. (UK)
I clicked the pop up without even thinking, and it began... Nobody knew what to do. Fortunately I found your page using another computer and tired to rename the files. I coudn't find all of them, but managed to change one. then thje computer rebooted and I could get rid of AVG. Then I downloaded a new wersion and it is OK. Thanks a lot guys!

Hi
I have just fixed my problem with the Flooder ake Bug. using the first fix on your site, It's worked BRILL, thanks a lot.
Yours is the only site-hit i got with a hunt for help.

One last post here. We got everything strait now. We restarted in safe mode and released the file from "jail". Once it was released we removed AVG and restarted. It was a little hesitant to restart, but it came up and the login screen pop'd up without restarting in a loop. Everything is, for now, as it should be.

Just remove AVG in SafeMode and that looks like a fix. Thanks for the info.

IF F8 does not work on your computer for safe mode - try Ctrl F5.

Question: I followed solution #1: Boots fine now; however, when I log into AOL my computer shuts off .... ANY THOUGHTS HERE?

Dam google index's fast (1 day)
I had the same looping problem yesterday. The problem is fixed now

I have Windows XP pro SP2 and AVG. This morning on my daily 8am scan it did in fact find 2 Trojans flooder.ake even popped up the heal box. I clicked it with out even a second thought at first, and it did nothing. I later pulled up AVG and viewed the 2 things it had deemed infected. I pulled up this site and read everything that everyone wrote which was helpful as this was the only information I've been able to find on flooder.ake. Since nothing had happened when i clicked heal, it did not require a restart I went ahead and clicked restore and save on both files. I then removed AVG and restarted my computer, I then reinstalled AVG 7.5 and ran a clean scan it appears everything is now ok. Thanks for the info. Hope that anyone having this issue is able to have it resolved soon and with out much pain. I did not do this in safe mode and everything appears good. Does anyone think i would have any repercussions from not using safe mode to remove?

OK, my wife's machine got it this morning prior to 0800 MST and AVG detected it and "healed" it. Her machine is an HP a1020 with a normal C drive and the HP_RECOVERY D drive. AVG did not detect it on the C drive, even though winlogon exists in the two spots already mentioned, but AVG detected it only on the D Drive and put both files in the virus vault. The machine runs Windows XP Home SP2 auto-patched. No problems with booting or anything. My son's machine, which is not HP but runs the same OS as my wife's and AVG, did not detect the problem at all. I just completed an AVG scan after updating it through itself.

This was different than other people's experience so I thought I would report it.

Great job guys! this is the only site with actual solution for Flooder virus. Thanks a lot.

I was having this problem. I went into safe mode, uninstalled AVG and rebooted. The problem was fixed. I'm now going with a different antivirus program. Thanks for nothing AVG!

i was running spy sweeper when the box popped up. i am running xp pro sp2 media edition. i clicked on heal and the problem was quanintined. i was not asked to reboot. my computer seems to be running fine.

should i still uninstall AVG free? and if so, what anti virus does anyone recommend?

Yep spent the last 24 hours on this issue. Is it only the AVG 7.1 version?
tried to do the above, but it has not worked, I fianlly got into the Networking Safe mode and I am still in endless reboot mode. I tried to uninstall AVG in this safe mode, it wouldn't do it, had error messages that it could not complete this function.If you uninstall what happens to the nasties thats in your virus vault? Any other thoughts. I as well could not find the drivers requested - tried a restore back a week, didn't work, Thought I had found the answer but not yet...any thoughts
Thanks

In response to the post by Fred Newsom....I also noticed there were errors listed for reading the boot sector and partition tables. I manually removed AVG since it would not uninstall, and I'm now running an online scan (with BitDefender...Trend Micro kept crashing)...it's taking forever...if it finds anything, I'll post an update.

I have an idea to bounce around for the people who can't even boot into safe mode...

Can you install 98 or something on another partition so you can dual boot and go in that way? Once in, perhaps go to your XP system/driver folder, rename the avg files (or move them)...perhaps even rename the Grisoft/avg folder in program files (or wherever you put it)...then find a copy of winlogon and put it back where it's supposed to be. If you placed it into the vault, you can't get it back out though...(Does anyone know if this file online any place?....or do we need to even bother replacing it...will windows create a new one at startup?)

If you can manage to reboot into XP again, (you may get errors because avg is *missing*) you can go through the registry, look for any avg entries and delete them all.

It's a pain in the ass...but if it works, you won't have to reinstall XP.

AVG uninstalled tested and works!!! I bet there are a bunch of unhappy AVG users out there.

Well I have had the same sad story as all of the above for the past 2 days, and THANK YOU to this site! I also could not get into "Safe Mode" after the loop problem, but I found a way to beat it (For me at least, and hopefully for others).
Here's what I did:

I booted the PC with a win98 startup disk

I went to c:\windows\system32\drivers
and typed
ren avgclean.sys avgclean.sy
ren avg7rsxp.sys avg7rsxp.sy

therefore renaming the files mentioned above

I copied a known good winXP winlogon.exe file from c:\windows\system32 and put it on a floppy.

I took the floppy to the infected PC and typed from the C: prompt
copy a:\winlogon.exe c:\windows\system32

I then removed floppy and rebooted and pressed F8 to get to "Safe Mode" It made it into "Safe Mode" and I Uninstalled AVG through "Add And Remove Programs"
During the uninstall I checked "remove personal settings" & "Delete Virus Vault"

When done it rebooted PC and VIOLA! I was back in business!

I have used AVG for a long time, and I can't understand how this happened, but the thing that bothers me most is while looking for a fix, I read a lot of well meaning people that don't know that it is an AVG bug, and are telling people all kinds of things to do to their PC's, which may get them even more jacked up than they were!

Anyway, hope this helps at least some of you!
Good Luck!

the guys who wrote this web are spending a LOT of money trying to help us.
LET'S HELP'EM BY CLICKING THE ADs !!!!!!

The fix sounds all good and well, but I have a deeper problem. Prior to reading the fix I started a repair using my XP CD. When the computer rebooted to continue the install/repair it starts to load the setup and then goes back into the loop!!! No matter whether I try to boot in safe mode or any of the other choices I get the same thing. I get a error that a "cyclic redundancy" has occured. ANY HELP PLEASE!!

Brian

Hi

I had Trojan horse flooder AKE on my PC. I uninstalled AVG and that fixed it for me.

I have Windows XP, service pack 2, and upgraded from AVG 7.1 to 7.5 yesterday hoping that would solve the problem. It didn't!!

My computer is running fine, but I have not been able to do a system restore, or go into safe mode since AVG detected the following four flooder.ake trojans and sent them to the vault:

winlongon.exe(two of these),
A0079791.exe and A0079792.exe

I'm reluctant to delete either, because those items may be needed for my system restore or safe mode to work. Also, a few people have stated they've lost windows and other needed features after doing deleting these recent flooder.ake trojans, similar to this woman here:

http://forums.spybot.info/showthread.php?t=9577&highlight=flooder.ake

What should I do with these things four things in the vault? Should I restore them, and uninstall AVG. Or God forbid delete them and hope for the best? Thank you, T.J.

Hello, arriving home 12/7 I found my networked computers were all infected with the virus, with the exception of my Linux box. First off, the fix listed didn't completely work. The files listed on the fix weren't there to rename. What I discovered was, just simply remove AVG in safe mode and reboot the computer. This was a 5 minute fix and the computers are working fine. I then re-installed AVG and the updates and I am back up running and virus free!
Dave

If I go into add/remove programs to uninstall AVG in safe mode, is it safe to do this with the winlogon.exe programs in the AVG virus vault?

Also, in C:\WINDOWS\system32\drivers\ I only see something named avgclean and not

AVGCLEAN.SYS -> AVGCLEAN.SY_
AVGRSXP.SYS -> AVGRSXP.SY_

Do I still need to change the avgclean? I have windows xp service pack 2.

The above post by Vince (December 7, 2006 6:26 AM) for Windows XP Pro is spot on.

If you are a Win XP Pro user with AVG antivirus software, find Vince's comment above and follow it to the letter.

I will sheepishly admit that I am running the original version if Win XP Pro WITHOUT any service pack updates.

The fix sounds all good and well, but I have a deeper problem. Prior to reading the fix I started a repair using my XP CD. When the computer rebooted to continue the install/repair it starts to load the setup and then goes back into the loop!!! No matter whether I try to boot in safe mode or any of the other choices I get the same thing. I get a error that a "cyclic redundancy" has occured. ANY HELP PLEASE!!

ok,the fix sounds quite accurate but my problem is a bit complicated.
i just found this site.but that's too late.
i have this problem from december 6
avg deleted winlogon.exe and since this my comp started to reboot.
i didn't know what to do so in bios i changed option 'to boot' from cd-rom and put there my instalation cd.
i tried to make actualization but it can't end.
and that stops from going into safe mode etc.
p.s.sorry for my english

Man did I ever jump the gun. I had my mom via telephone (she lives far away) go into safe mode and run an avg scan..when she described the flooder.ake I knew why all the restarting on logon..so we immunized and I had her restart...DUH....should ave investigated first...so now we can't even get into safe mode again..I found http://www.adwarereport.com/mt/archives/000325.html#comment-7777
by Duecekd an am trying to get a friend where she lives to follow those instructions..if it doesn't work, does anyone know if reinstalling from the winxp cd that I used will fix it..I have it here and she is too far from me..to do it now...

I also got the virus but it didnt shut down my computer it is on D drive D1386 system 32\winlogon.exe and D\Mini NT\system 32\winlogon.exe I also have AVG Free edition everything was updated and current,it is in quarantine and unfixable should I just delete the quarantined files or uninstall not sure what to do Thanks

We obviously got hit with the bug the day it came out. We thought we had lost everything and actually sped up the process of purchasing a new computer.

After not having internet access, I ventured to the Library and found your website. I know have it bookmarked as it was very helpful. Who would've known it was as simple as deleting AVG all together from your computer. My wife and I were both freaking out over the whole thing.

Thanks a million!

I had experienced the same problem, after avg reboots the computer I was in an endless loop. Took out hard drive swapped with another computer ran virus scanner and spyware nothing showed up. I posted to a couple of forums but nobody could help except for one user to said to uncheck automatic restart under advanced Startup and recovery. I was able to see what the error was on the BSOD. Did a search on error and Microsoft said IE needs to be upgraded to resolve issue. I did not want to upgrade to IE 7 so I continued searching for help. It took me a week until I was able to fix the problem. Thank You Very Much for this write up. Uninstalling AVG in safe mode worked for me, I am now able to log into windows normally. Thanks Again.

I have another twist to this story... what if I can't get the computer to boot in safe mode? I tried reloading my OS by using a startup disk, then running setup from the CD, but it says, "this program can not be run in dos mode" I looked in the windows/system32 directory and didn't find the winlogon.exe file so I copied it from another computer and put it in there... not sure if I can do that... it still wouldn't boot in safe mode anyway. Is there a way to make the necessary changes as above from dos?

Thanks.
Mark.

I got hit with Flooder.BBG on the 21st of February, 2007 and it looks like it causes similary problems with the operating system that I am still trying to solve. I got is on my desktop and my laptop both and it has caused operating system problems. I didn't worry about my desktop right away because I am trying to get my laptop ready for me going on a trip and using it. But while tinkering with is it got so bad I couldn't even get it to boot in the "safe mode" and in fact it wouldn't boot at all... By this morning I had finally managed to get it to boot up like it is supposed to but I am afraid to shut it off for fear it won't boot again...haha... Not funny though...

Here is a copy of email sent to the this websites admin:

I have been reading info at your website and I came across info about AVG and Flooder.ake. I use AVG antivirus on both my laptop and my desktop computers. Yesterday or the day before (I can't even remember as I am in such a brain fog over the computer problems I am having) AVG Anitvirus, which is set to scan both of my computers at 11AM, found the Trojan horse "Flooder.BBG on both computers and both of the WinXP OS went to H---- in a handbasket after that. The first thing I noticed is that Internet Explorer 6 was not working properly. Well that didn't bother me too much because I use Firefox but I do have to use IE once in a while plus from an experience in the past I know that if IE is not operating properly that there are most likely problems with the WinXP OS or at least there are going to be...

I concentrated on my laptop since I was getting it ready to take on a trip with me. I decided to try another virus scanner and so I chose Kaspersky. It wouldn't install unless I uninstalled both AVG and Avast antivirus scanners. So I did that but not in the "safe mode." My laptop started deteriorating fast and it got so that I couldn't even get it to boot in the "safe mode." I kept working with it and finally got it to boot in the safe mode and so I ran the Kaspersky antivirus program and it found a trojan in my Eudora email program in one of the save boxes that had been there for about 6 months. It was called Trojan-Spy.html.Fraud.Gen (modification) that came from an eBay email spoof and I don't think it was causing any problems at least not related to the problems I was having now. Anyway I kept fiddling around with the laptop until this morning I finally got it to boot up cleanly (I am afraid to shut it down for fear that it won't boot up cleanly again...haha...) Thinking at that time that the setting on the Kaspersky antivirus program were maybe causing my boot problems I set the KAV up so that none of it's normal operations were working. I did an update on it and ran it again and it didn't find anything (I was looking to see if it would find the Flooder.BBG trojan that the AVG antivirus had found) I had read somewhere about the AVG Flooder.ake problem of December 2006 but the info was pretty skimpy. It is just starting to dawn on my that my problem is most likely related to the Trojan Flooder.BBG that AVG found....

Of course I have no idea what to do to fix the problems I am having with my computers other than to reinstall WinXP which I don't want to do because it takes me a long time to get my computers all set up the way I want them. I may look at what you have suggested for those Flooder.ake problems of the past and see if those ideas may work.

Have you heard from anybody else who may be running AVG who might have had Flooder.BBG problems? I have just posted on AVG Free forums but as yest have no answer...

I just re-formatted and installed a 'brand new' AVG.
7.5 (free) I have sp2 on my windows xp...First virus scan revealed flooder trojan in :
D:\1386\APPS\APP205990\src\Disk1\
Does that mean it's in my reformat disk(s)?
(1 of 10).
Thank you.
Me

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

All content copyright 2004, Gooroo, Inc. All Rights Reserved.
Adware Report | Site Map | spyware reviews | Recommended Books...